
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier: xtIw729CGwoZpG/EKqNOphpgp1zdGFGavcbRrTZFz/c=
Subject key identifier: 21:40:6A:67:B2:49:FB:66:46:71:24:22:64:61:FB:3C:A1:99:B1:DF
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial: 06C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number: 06AE
Signing time: Wed 22 Jul 2026 23:05:07 +0000
Manifest this update: Wed 22 Jul 2026 23:05:07 +0000
Manifest next update: Wed 29 Jul 2026 23:05:07 +0000
Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: qNN/1vm5fnqCZNOtLD1gR8zN7ohtMZ62bZS9pcYL7CM=)
2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: qAA+JmCD1XiQPNk2+rjFsSeH+9Ig2+qzcEQPIf4Yw7U=)
3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: PJtMmmzqWr4Ah2oRz29LH07ry6ra6iCiilV599rXJrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Validity
Not Before: Jul 22 23:05:07 2026 GMT
Not After : Jul 29 23:05:07 2026 GMT
Subject: CN=6a614ca3-b8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:94:f0:79:64:3f:3b:f4:5a:da:41:97:0f:
7e:91:e7:1b:2b:09:5f:26:e8:49:a3:52:fe:42:0c:
79:80:53:6d:9e:36:78:c4:49:82:b7:ee:2b:05:9b:
97:17:17:ca:c7:95:22:56:3a:ff:ba:0f:6a:45:a1:
fe:b7:19:ff:45:7d:c5:d3:2c:52:66:86:94:c1:d6:
1d:3f:08:96:6d:a1:cd:e3:ee:e8:6d:65:bb:40:d1:
96:6f:38:29:4d:71:bf:17:12:56:d8:1b:8a:36:4f:
af:59:c9:83:47:ce:2e:bd:65:bc:40:36:98:18:ea:
80:de:e5:40:44:4a:b2:55:8e:a8:2a:2b:fe:4d:ff:
b8:8b:e8:bc:0a:33:54:c0:57:95:32:5f:9e:cb:db:
34:a4:2c:c6:d5:87:2c:7c:33:59:02:13:6a:6e:5d:
bf:69:3c:9c:6c:9e:ee:a2:a5:68:ab:b3:dc:33:27:
41:5b:30:7a:19:a8:a7:d3:40:13:6d:4f:8a:e7:d5:
76:93:75:f2:22:94:f5:9d:4a:62:ee:75:89:69:df:
9d:5f:ff:ae:47:de:54:6d:5c:8c:69:10:13:e1:be:
69:e5:ea:d5:1e:16:15:f6:d4:6b:57:d3:aa:e5:b0:
77:09:4a:dc:87:6c:a9:47:b2:24:16:e0:bf:f4:2e:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:6A:67:B2:49:FB:66:46:71:24:22:64:61:FB:3C:A1:99:B1:DF
X509v3 Authority Key Identifier:
keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:17:64:f2:c6:9d:10:e7:47:31:47:90:9b:ff:41:f0:0c:
7a:9a:9a:84:bb:6a:4c:0e:7a:92:28:74:05:fd:fa:51:6a:b3:
4f:9b:22:1c:72:cf:07:b5:0f:48:a4:ca:ba:17:d1:98:7f:ca:
4a:86:64:e7:f6:46:90:d1:cc:33:99:37:60:e2:74:2f:53:be:
20:d7:df:1b:a5:c5:72:5d:70:60:25:db:e7:0c:58:e1:2a:3f:
ff:24:c3:05:34:1a:6d:5b:a9:5f:25:f4:d1:2d:31:57:34:53:
da:3e:69:ab:df:69:02:2a:b9:e7:47:78:42:44:7c:7d:4b:4c:
b5:1f:f4:f2:a8:ea:78:9b:bf:8d:e5:c4:dd:82:5d:0e:e4:2e:
1f:d5:31:51:76:7b:ce:71:63:66:7e:25:c4:1a:40:64:e8:62:
19:1b:18:43:05:6a:62:82:1b:2e:93:aa:43:d5:40:8f:08:34:
b8:d8:fb:15:31:c8:23:cf:cf:8d:01:b2:ea:35:80:fb:a9:88:
ce:fb:b4:ff:b7:90:24:d5:c7:40:79:b7:3e:3e:e2:47:19:5f:
aa:eb:cd:d7:c9:14:13:63:e3:52:0f:d8:3d:77:6e:94:39:f6:
60:95:aa:09:60:e8:3f:0f:99:c9:19:c4:3e:a6:2d:9e:96:8a:
85:6d:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:21 2026 by rpki-client